Author: HackWatchit

Microsoft has released the optional KB5055612 preview cumulative update for Windows 10 22H2 with two changes, including a fix for a GPU paravirtualization bug in Windows Subsystem for Linux 2 (WSL2). The KB5055612 cumulative update preview is part of Microsoft’s “optional non-security preview updates” schedule, typically released at the end of every month. This update allows Windows admins to test upcoming fixes and features that will be released in the upcoming May Patch Tuesday. Unlike Patch Tuesday cumulative updates, this preview update does not include security updates.  Windows users can install this update by going into Settings, clicking on Windows Update, and…

Japan ’s FSA warns of unauthorized trades via stolen credentials from fake security firms’ sites Pierluigi Paganini April 22, 2025 Japan ’s Financial Services Agency (FSA) warns of hundreds of millions in unauthorized trades linked to hacked brokerage accounts. Japan ’s Financial Services Agency (FSA) reported that the damage caused by unauthorized access to and transactions on internet trading services is increasing. “There has been a sharp increase in the number of cases of unauthorized access and unauthorized trading (trading by third parties) on Internet trading services using stolen customer information (login IDs, passwords, etc.) from fake websites (phishing sites)…

VCC or virtual client computing is an advanced IT approach with a comprehensive application and desktop virtualization solution. The system is fabricated to aid businesses in reducing IT costs and support a mobile workforce while maintaining data security. Virtual Client Computing or VCC has gained prominent importance amongst the market players. This blog will explore various factors propelling the market’s growth in the coming period. Why are plenty of companies opting for VCC? Rising demand for remote work solutions in the hybrid environment It has been estimated that almost 91% of employees globally prefer to work fully or almost completely remotely. Organizations…

Cloud Range and Cyviz announced on Tuesday their initiative to enhance cybersecurity training within higher education institutions as partners for IBM’s Cyber Campus offering. Working together to deliver IBM’s Cyber Campus, Cloud Range, Cyviz, and IBM equip students with practical, hands-on experiential learning through an immersive, live-fire simulation platform, bridging the gap between academic knowledge and real-world job experience. A dangerous shortage of cybersecurity workers in the United States puts digital privacy and the nation’s infrastructure at risk. ISC2’s 2024 Cybersecurity Workforce Study indicates a global cybersecurity workforce gap of 4.8 million, with a North American gap of 543,000, highlighting…

AWS is a well-known cloud provider whose primary goal is to allocate server resources for software engineers to deploy their applications. AWS offers many services, one of which is EC2, providing virtual machines for running software applications in the cloud. However, for data-intensive applications, storing data inside EC2 instances is not always the optimal choice. While EC2 offers fast read and write speeds, it is not optimized for scalability. A better alternative is to use S3 storage instead. Storing data in EC2 vs S3 Amazon S3 was specifically designed for storing massive amounts of unstructured data: It has a highly…

Ray Felch // Preface: Following the work of the Bastille Research Group (See: https://github.com/BastilleResearch/mousejack), I was interested in knowing if these (keyboard injection) vulnerabilities were still valid. To my surprise, I was able to duplicate the attack on an inexpensive Logitech keyboard that I already had in my possession. This keyboard (Logitech K400r) is still available at my local Walmart for under $20. In particular, wireless devices using the Unifying receiver (depicted with the orange star) are particularly vulnerable. From my initial research, it appears that communication (keystrokes) from the wireless keyboard is encrypted to prevent eavesdropping and that mouse…

Key Findings The number of publicly-mentioned and extorted victims in Q1 reached the highest ever number, with a 126% increase year-over-year. Cl0p returned to prominence as the most prolific ransomware actor in Q1 2025, exploiting new zero-day vulnerabilities in Cleo-managed file transfer products Harmony, VLTrader, and LexiCom. 83% of Cl0p’s victims were in North America. 33% of Cl0p’s victims were from the consumer goods & services sector. Ransomware groups like Babuk-Bjorka and FunkSec now routinely fabricate or recycle victim claims, with dozens of questionable entries published. What began as a marginal tactic of Lockbit after its takedown has become widespread,…

Aaron Levy, a public servant with more than 17 years of federal experience, has taken on a new role as Vice President of Government Relations at the International Code Council. He announced the move on LinkedIn, calling it a natural next step after nearly two decades spent advancing public safety, preparedness, and resilience across multiple federal agencies. In his announcement, Levy emphasized the critical role of strong building codes in protecting communities from disaster, stating he’s “honored to join this team to help ensure safe, affordable, and sustainable communities and buildings worldwide.” Levy’s transition to the International Code Council follows…

CrowdStrike is excited to announce CrowdStrike Falcon Privileged Access, a new offering within CrowdStrike Falcon® Identity Protection that uses high-fidelity risk signals to provide just-in-time access to organizations’ critical permissions and resources. Adversaries know valid credentials unlock access to data, infrastructure, and capabilities. Nearly 80% of attacks to gain initial access are malware-free, the CrowdStrike 2025 Global Threat Report found, indicating threat actors are using trusted identities and other alternative methods to infiltrate organizations undetected. Access broker advertisements, often selling valid credentials, were up 50% between 2023 and 2024. The more privileged those credentials are, the more value they have.…